Implementing untrusted plugins in .NET web application -

-

i'd develop application accepts plugins user community, similar how chrome or firefox does. web application, each "instance" of application individual users run different plugins (plugins loaded singleton instances, "active" users). i'm planning on implementing application in .net, , trying come architecture plugin model.

here desired attributes:

  • plugins built entirely outside of core application, separate assemblies.
  • plugins run in own "locked down", low-trust environment. separate appdomain.
  • plugins can act through api provide. e.g. pass them sort of facade interface, , can call that, not call other assemblies. can't have plugins can arbitrarily take actions on web server, e.g. affect file system.
  • a fatal crash in addin cannot affect stability of core application.

it seems system.addin best bet, unclear on how can force loaded addins work through api provide, , not load other assemblies. system.addin provide functionality? also, can system.addin used asp.net / iis?

what other options have besides system.addin?

you try using appdomains , handle unhandled exceptions. avoid appdomain crashes, have handle appdomain.unhandledexception

in above link, note following statement

starting .net framework 4, event not raised exceptions corrupt state of process, such stack overflows or access violations, unless event handler security-critical , has handleprocesscorruptedstateexceptionsattribute attribute.

so may need explicitly handle configuration.

i have read lot of issues claiming when unhandled exceptions occur on different threads in child domain, bubble , bring down parent domain. if so, loading plugins separate process appdomain per plugin or loading plugins separate process may advisable.

i came across following question on believe find helpful


Comments

Post a Comment

Popular posts from this blog

Delphi XE2 Indy10 udp client-server interchange using SendBuffer-ReceiveBuffer -

-
i use delphi xe2 , indy10 udp protocol. can't receive server echo on client side if use receivebuffer method. got "socket error # 10040" although send small echo message server client. console application illustrate problem below. in advance. program project1; {$apptype console} {$r *.res} uses system.sysutils, idglobal, idbasecomponent, idcomponent, idsockethandle, idudpclient, idudpserver, idudpbase, idstack; type tudp_serv = class(tidudpserver) procedure udpsvudpread(athread: tidudplistenerthread; adata: tidbytes; abinding: tidsockethandle); end; var udpserver: tudp_serv; udpcl: tidudpclient; bsnd, brcv: tbytes; s: string; k: integer; //============================================================================== procedure tudp_serv.udpsvudpread(athread: tidudplistenerthread; adata: tidbytes; abinding: tidsockethandle); begin writeln(' server read: ' + tohex(adata, length(adata))); abinding sendto(peerip, peerport, adat...
Read more

Qt ActiveX WMI QAxBase::dynamicCallHelper: ItemIndex(int): No such property in -

-
i new windows programming. here goes code objiwbemlocator = new qaxobject("wbemscripting.swbemlocator"); objwmiservice = objiwbemlocator->querysubobject("connectserver(qstring&,qstring&)",qstring("."),qstring("root\\cimv2")); qaxobject* returnlist = objwmiservice->querysubobject("execquery(qstring&)", qstring("select * %1").arg(domain)); qaxobject* result = returnlist->querysubobject("itemindex(int)", 0); i getting error on runtime qt activex wmi qaxbase::dynamiccallhelper: itemindex(int): no such property in but itemindex method exists msdn says the itemindex method not work collections not contain swbemobjects, such swbemmethodset, swbemnamedvalueset, swbemprivilegeset, swbempropertyset, , swbemqualifierset. what selecting ? have tried iterating on collection ? plus need minimum windows vista itemindex method. hope helps
Read more

Enable autocomplete or intellisense in Atom editor for PHP -

-
i'm first time user of atom editor php code. atom can autocomplete built-in functions of php. possible make editor autocomplete custom function written in separate file? function.php <?php function printsomething() { echo "hello world"; } index.php <?php require_once "function.php"; printsomething(); // autocompleted atom editor while typing thanks in advance. there text file in %userprofile%.atom called snippets.cson. in there can add snippet. more this: http://flight-manual.atom.io/using-atom/sections/snippets/ but need think can use later on other files well. otherwise need copy , paste.
Read more